Last updated: 22 September 2026
1. Who this applies to
Dendo People is an internal application for employees of DENDO ("we", "us"). It is not available to the general public. An account can only be created by a DENDO administrator; there is no public sign-up.
This policy explains what the app collects, why, who can see it, and how long it is kept.
2. What we collect
Information your employer records about you
| Data | Why |
|---|---|
| Name, employee code, work email | Identifying your account and records |
| Designation, department, joining date, employment type | Applying leave, shift and reporting rules |
| Date of birth, mobile number | HR records and contact |
Information you choose to provide
| Data | Why |
|---|---|
| Profile photograph | Shown on your profile. Optional. |
| Blood group | Health information, for workplace emergencies. Optional, and you can clear it at any time. |
| Emergency contact name, relationship and number | So HR knows who to contact if something happens at work. Optional. Please tell that person you have shared their details. |
| Bank details — account holder name, bank and branch, account number, IFSC code, account type, and a photograph of your passbook front page | Paying your salary or stipend. Required in order to be paid. |
Information created as you use the app
| Data | Why |
|---|---|
| Location at check-in and check-out | Confirming attendance was recorded at an approved office location |
| Attendance times, breaks, shift | Attendance records |
| Leave, permission and work-from-home requests, and the reasons you give | Processing your request and keeping a record of the decision |
| Medical certificates you upload | Health information, required for sick leave beyond one day |
| Tasks, hours logged, and queries you raise | Work records and HR correspondence |
| Device notification token | Sending you push notifications |
| Sign-in times and an audit log of administrative actions | Security and accountability |
3. Location — what we do and do not do
Your location is read only at the moment you tap check in or check out.
- The app does not track you in the background. It holds no background-location permission on either Android or iOS, and cannot read your position while it is closed.
- It does not follow your movement. There is no continuous or periodic location monitoring.
- Each reading is a single coordinate stored against that attendance record, used to check you were within the approved radius of an office.
- If you decline location permission, you can still use the rest of the app; only the geofenced check-in is affected.
4. Sensitive information
Two kinds of health information may be held: your blood group, if you choose to enter it, and any medical certificate you upload to support a sick leave request.
Your bank details are held so you can be paid. They are treated the same way as a medical certificate:
- Your passbook image is stored as a file with restricted access and is never served publicly. It is retrieved only through short-lived, authorised links.
- They are visible to HR and Super Administrators, not to your colleagues and not to Department Administrators.
- In the app your account number is shown masked — only the last four digits — so it is not exposed over your shoulder.
- You enter them once. Afterwards only HR can change them, and every change is recorded in the audit log with who made it. This is deliberate: it is how an account number is protected from being altered by anyone who picks up your phone.
- Medical certificates are stored as files with restricted access and are never served publicly. They are retrieved through short-lived, authorised links only.
- They are visible to the administrators who review leave, not to your colleagues.
- They are automatically and permanently deleted after the retention period set by DENDO (currently 365 days after upload).
5. Who can see your information
- You — your own records, through the app.
- HR and Super Administrators — employee records across the organisation, as required to run HR processes.
- Department Administrators — records for employees in their own department only.
- Other employees — cannot see your attendance, leave, documents or contact details.
Every administrative action is written to an audit log recording who did what and when.
6. Who we share it with
We do not sell your information, and we do not share it for advertising. There is no advertising or analytics tracking in this app.
It is processed by these service providers on our behalf:
- Amazon Web Services — hosting and database storage.
- Google Firebase Cloud Messaging — delivering push notifications. Notification text may pass through Google and Apple's notification services in order to reach your device.
We may also disclose information where the law requires it.
7. How it is protected
- All traffic between the app and our servers uses HTTPS.
- Passwords are stored only as irreversible hashes; nobody at DENDO can read your password.
- Sign-in tokens are held in the device's secure keystore (iOS Keychain / Android Keystore), not in ordinary app storage.
- Uploaded files are private and reachable only through authorised, time-limited links.
- Access is restricted by role, and administrative actions are logged.
8. How long it is kept
- Medical certificates — deleted automatically after 365 days.
- Bank details — kept while you are employed and afterwards for as long as DENDO is required to keep payment records.
- Employment, attendance and leave records — kept for as long as you are employed and afterwards for as long as DENDO is required to keep employment records.
- Audit logs — kept for security and accountability.
- When your employment ends, your access is revoked immediately. Your historical records are retained as above.
9. Your choices and rights
- Optional fields — blood group, emergency contact, profile photo and mobile number are yours to provide or leave blank, and you can change or clear them at any time in the app.
- Location — you may decline or revoke the permission in your device settings.
- Notifications — you may turn these off in your device settings. The app's Notifications screen still shows everything.
- Access and correction — to see what is held about you, or to correct it, contact HR using the details below.
Some information cannot be deleted on request while you are employed, because DENDO is required to keep accurate employment and attendance records.
10. Children
This app is for DENDO employees and is not directed at anyone under 18.
11. Changes
If this policy changes materially, we will update this page and the date at the top.
12. Contact
Questions about this policy, or about the information held about you:
DENDO
No. 4/361, Varagooran Kottai Village, Kalappambadi Post,
Pennagaram Taluk, Dharmapuri District,
Tamil Nadu – 636813, India
Email: support@dendo.store
Phone: +91 89512 12583